Legal
Cookie Policy
Last updated: 5 September 2026
Related: Privacy Policy · Terms of Use · Company Information
How consent works on this site
Nothing beyond strictly necessary storage loads until you make a choice. A banner asks for consent on your first visit: Accept turns on privacy-conscious analytics (Google Analytics 4); Decline keeps it off. Both choices are remembered so you aren't asked again, and you can change your mind at any time using the control below.
Current status: No choice recorded yet
What this site actually uses
This is a direct account of what ittcsec.com stores or loads, not generic boilerplate. It's reviewed against the live implementation, not assumed.
| Name | Provider | Purpose | Category | Duration | Party |
|---|---|---|---|---|---|
| ittcsec-cookie-consent | ITTCsec (first-party) | Remembers whether you accepted or declined non-essential analytics, so you aren't asked again on every visit. | Strictly necessary (browser local storage, not a cookie) | Until you clear it or use "Manage cookie preferences" below | First-party |
| _ga, _ga_<container-id> | Google (Google Analytics 4) | Distinguishes visitors and sessions for aggregate site-usage analytics. | Analytics (non-essential, consent-gated) | Up to 13 months (Google's standard GA4 default) | Third-party |
| Google Tag Manager / gtag.js script load | Loads and runs the Google Analytics 4 measurement code itself. | Analytics (non-essential, consent-gated) | Session (script), cookies as above | Third-party |
The rows above only appear at all once you've accepted analytics, except the first-party consent-storage entry, which is set the moment you make either choice. We don't run advertising trackers, retargeting pixels, session-recording scripts, or any third-party marketing technology on this site.
Analytics: what's collected, and IP anonymisation
When accepted, Google Analytics 4 records aggregate usage data: pages visited, general location derived from IP address, device/browser type, and how you arrived at the site (e.g. a search engine or a direct link). IP anonymisation is enabled in our configuration, so your full IP address is not retained by Google Analytics.
Local and session storage beyond cookies
The interactive self-assessment tool on this site (/security-assessment) keeps your answers only in the page's memory while you're using it. Nothing is written to browser storage or sent to a server, and closing or reloading the page clears it. If you sign in to the staff administration area (not part of the public site), Supabase's authentication library stores a session token in your browser's local storage; this applies only to authorised ITTCsec staff, not to visitors.
Managing cookies in your browser
You can also block or delete cookies through your browser's own settings. Doing so may reset the consent choice recorded on this site, and you'll be asked again on your next visit.
Changes to this policy
If the technologies this site uses change, this page will be updated and the "last updated" date above will change accordingly.
Contact
Questions about this policy can be sent to info@ittcsec.com.